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^ WHAT IS CLAIMED IS: 

1. A long product-sum operation method comprising: 
Ing a unit operation by propagating a carry 
]• based unit arithmetic operation; and 



perform 
in an intege 



performing a unit operation without propagating any 



carry in a f 
operation. 

2. An 
integer prod 



Lnite field GF(2"m) based unit arithmetic 



circuit logi 
arithmetic c 



based unit a 
3. An 



data to resu 
arithmetic- c 



arithmetic apparatus for performing a long 
uct-sum arithmetic operation, comprising: 
an integer based unit arithmetic circuit; 
a finite field GF(2"m) based unit arithmetic 

cally adjacent to said integer based unit 
ircuit; and 

a seledtor configured to select one of said integer 
unit arithmetic circuit and said finite field GF(2 A m) 
rithmetic circuit. 

apparatus according to claim 2, further 
comprising an adder circuit which has a buffer for 
storing interim result data, adds the interim result 
It data from one of said integer unit 
j;rcuit=^and^sa±d^ f ±nite-=f ield-GF (^2-m)— based-— 
unit arithmetic circuit which is selected by said 
selector, propagates a carry in an integer based unit 
arithmetic operation, and propagates no carry in a 
finite field GF(2^m) based unit arithmetic operation. 
4. An apparatus according to claim 3, further 



comprxsing a 



carry holder for storing a carry obtained 
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in a previous operation cycle, and an output-stage adder 
circuit configured to add the carry in said carry holder 
to an output from slid adder circuit, output an upper 
bit of an addition besult as an updated carry to said 
carry holder, and Output a lower bit of the addition 
result as operatioh result data. 

5. A crypto processing apparatus for selectively 
encrypting or decrypting based on an integer based 



operation by said 
2, and encrypting 



arithmetic apparatus defined in claim 
or decrypting based on a finite field 
GF(2~m) based arithmetic operation by said arithmetic 
apparatus 

6, An arithmetic apparatus comprising: 
an arithmetic unit including an integer unit 
arithmetic circuit; 

a controller configured to output, to said integer 
unit arithmetic circuit, a selection signal for 
selecting one of an integer unit arithmetic operation 
and finite field GF(2*m) based unit arithmetic 
operation; and 



a carry propagation controller configured to 



propagate, when 
executed, a car 
said integer ba 
reception of a 



a long product-sum operation is to be 
::y of an operation result obtained by 
3 ed unit arithmetic circuit upon 
selection signal corresponding to an 



integer based Jnit arithmetic operation, and propagate 
no carry of thf operation result upon reception of a 



4 4 
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10 



15 



20 



25 



selection signal corresponding to a finite field GF(2 /S m) 
based unit arithmetic operation, 

wherein an inteder based multiply operation and 



finite field GF(2"m) 



based multiply operation is 
switched by controlling the carry propagation. 

7. An apparatus according to claim 6, wherein said 
integer unit arithmetic circuit comprises a full adder 

propagation controller comprises a 
selection signal and a carry out 



(FA), and said carr^i 
switch to which the 



signal are input, aid performs carry propagation control 
of said full adder in units of bits, 

8. An apparatus according to claim 6, wherein said 
integer unit arithmetic circuit comprises a fuller adder, 
and said carry propagation controller comprises a 
selection section configured to switch between 
outputting a 2-indut EX-OR result obtained by said full 
adder in units of [bits and outputting an EX-OR result 
based on the resulLt and an input carry as an addition 
result. I 

9. An apparatus according to claim 6, wherein said 



propagating a carry when executing the integer based 
multiply operation, and adds without propagating any 
carry when executing the finite field GF(2 A m) based 
multiply operation. 

10. A crypto processing apparatus for selectively 
encrypting or decrypting based on an integer based 



* 
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operation by said aritl 



tetic apparatus defined in claim 



6, and encrypting or decrypting based on a finite field 



GF(2"m) based arithmetic 
apparatus . 

11. An arithmetic a 



operation by said arithmetic 



jparatus comprising: 



an arithmetic unit ;.ncluding a long product-sum 
operation circuit which executes a modular 
multiplication with a finite field GF(2 A m) based 
polynomial base expression; and 
10 a controller configured to divide the modular 

multiplication into multiply processing and a modulo and 
causing said long product-sum operation circuit to 
execute the modular multiplication. 

12. An apparatus according to claim 11, wherein 
15 said long product-sum operation circuit comprises a 

single precision multiplier circuit configured to 
multiply polynomial data of the finite field GF(2"m) 
based polynomial base Lithout propagating any carry, and 
a double precision adder circuit configured to add using 

20 a multiply result obtained by said multiplier circuit, 

-™ — 

said adder circuit iA the multiply processing. 

13. An apparatus according to claim 12, wherein 
said controller comprises a quotient acquisition circuit 

25 configured to set, ip the modulo, a multiply result of 

two polynomial data /as first dividend polynomial data, 
set predetermined midulo polynomial data as divisor 



polynomial data, calculate a quotient on the basis of 
the first or subsequent dividend polynomial data and the 
divisor polynomial data, and acquire 1-block quotient 
polynomial data with ;he number of bits corresponding to 
a bus width from an u])per order, and 

when 1-block quotient polynomial data is acquired 
in the modulo, said maltiplier circuit and said adder 
circuit calculate next dividend polynomial data by 
subtracting a multiply result of the 1-block quotient 
polynomial data and tfhe divisor polynomial data from 
current dividend polynomial data, and said controller 
controls said quotient acquisition circuit to repeat 
processing up to calculation of the dividend polynomial 
data, thereby obtaining residue data. 

14. An apparatus according to claim 13, wherein in 
the quotient calculation, said quotient acquisition 
circuit multiplies inverse data of upper two blocks of 
the divisor polynomial data and upper two blocks of 
current dividend polynomial data, and sets a second 
upper block of the Jhmltiply result as the 1-block 
quotientHPoiynomiaidata^— 



15 . An appara 
said quotient acqu 



us according to claim 14, wherein 
Lsition circuit calculates inverse 



data from upper twi) blocks of the divisor polynomial 
data and stores thfe data in a memory when acquiring 
quotient polynomial data in a first operation, and reads 
out inverse data flrom said memory when acquiring 



i 
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Hi 



to claim 14, wherein in 



quotient polynomial data in secopd and subsequent 
operations , 

16. An apparatus according 
calculating the inverse data, siid quotient acquisition 

5 circuit counts the number of consecutive Os from an 

upper order of upper two blocks of the divisor 
polynomial data, extracts polynomial data of one block + 
1 bit from an upper order such that a most significant 
bit is set to 1, obtains an inverse of the extracted 

10 polynomial data, obtains 2-tilock data as a whole by 

concatenating 1-block corrected data whose least 
significant bit is 1 and o&ther bits are 0 to a most 
significant bit of the obtained inverse, and setting, as 
the inverse data, a resAlt obtained by bit-shifting the 

15 data toward an upper order side by the count of 0s. 

17. A crypto processing apparatus for encrypting or 
decrypting based on/a finite field GF(2 A m) based modular 
multiplication by /said arithmetic apparatus defined in 
claim 11. 

20 18. An apparatus according to claim 11, wherein 

=™— — 

arithmetic circuit, operates said unit arithmetic 
circuit by propagating a carry when executing an integer 
based unit/ arithmetic operation, and operates said unit 
25 arithmetic circuit without propagating any carry when 

executing a finite field GF ( 2 A m) based unit arithmetic 
operatioi 



